Microsoft Discloses Critical Bugs Allowing Takeover of NETGEAR Routers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have detailed critical security vulnerabilities affecting NETGEAR DGN2200v1 series routers, which they say could be reliably abused as a jumping-off point to compromise a network’s security and gain unfettered access. The three HTTPd authentication security weaknesses (CVSS scores: 7.1 – 9.4) …

Hacker Wanted in the U.S. for Spreading Gozi Virus Arrested in Colombia

Blog WriterThe Hacker News - Original news source is thehackernews.com

Colombian authorities on Wednesday said they have arrested a Romanian hacker who is wanted in the U.S. for distributing a virus that infected more than a million computers from 2007 to 2012. Mihai Ionut Paunescu (aka “Virus”), the individual in …

Authorities Seize DoubleVPN Service Used by Cybercriminals

Blog WriterThe Hacker News - Original news source is thehackernews.com

A coordinated international law enforcement operation resulted in the takedown of a VPN service called DoubleVPN for providing a safe haven for cybercriminals to cover their tracks. “On 29th of June 2021, law enforcement took down DoubleVPN,” the agencies said …

[Webinar] How Cyber Attack Groups Are Spinning a Larger Ransomware Web

Blog WriterThe Hacker News - Original news source is thehackernews.com

Organizations today already have an overwhelming number of dangers and threats to look out for, from spam to phishing attempts to new infiltration and ransomware tactics. There is no chance to rest, since attack groups are constantly looking for more …

Researchers Leak PoC Exploit for a Critical Windows RCE Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

A proof-of-concept (PoC) exploit related to a remote code execution vulnerability affecting Windows Print Spooler and patched by Microsoft earlier this month was briefly published online before being taken down. Identified as CVE-2021-1675, the security issue could grant remote attackers full …

GitHub Launches ‘Copilot’ — AI-Powered Code Completion Tool

Blog WriterThe Hacker News - Original news source is thehackernews.com

GitHub on Tuesday launched a technical preview of a new AI-powered pair programming tool that aims to help software developers write better code across a variety of programming languages, including Python, JavaScript, TypeScript, Ruby, and Go. Copilot, as the code synthesizer is …

Unpatched Virtual Machine Takeover Bug Affects Google Compute Engine

Blog WriterThe Hacker News - Original news source is thehackernews.com

An unpatched security vulnerability affecting Google’s Compute Engine platform could be abused by an attacker to take over virtual machines over the network. “This is done by impersonating the metadata server from the targeted virtual machine’s point of view,” security …

New API Lets App Developers Authenticate Users via SIM Cards

Blog WriterThe Hacker News - Original news source is thehackernews.com

Online account creation poses a challenge for engineers and system architects: if you put up too many barriers, you risk turning away genuine users. Make it too easy, and you risk fraud or fake accounts. The Problem with Identity Verification …

Google now requires app developers to verify their address and use 2FA

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Monday announced new measures for the Play Store, including requiring developer accounts to turn on 2-Step Verification (2SV), provide an address, and verify their contact details later this year. The new identification and two-factor authentication requirements are a step towards …

Hackers Trick Microsoft Into Signing Netfilter Driver Loaded With Rootkit Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Friday said it’s investigating an incident wherein a driver signed by the company turned out to be a malicious Windows rootkit that was observed communicating with command-and-control (C2) servers located in China. The driver, called “Netfilter,” is said …